fa
Feedback
GL-DEV

GL-DEV

رفتن به کانال در Telegram

Clarification: we do not encourage violating the rules and regulations of any game. What we present here is all for the purpose of education, experimentation and testing. Chat Arabic: https://t.me/+mecGwFshKVkxZTFk, CH: https://t.me/+1txE55VyGGY4YTU0

نمایش بیشتر
کشور مشخص نشده استفناوری و برنامه‌ها37 797
1 215
مشترکین
+224 ساعت
+37 روز
+1030 روز
آرشیو پست ها
GL-DEV
1 217
-------
Yaw : 0x890
Roll: 0x898
Pitch: 0x888
LineOfSightTo: 0x7B0
@saudgl

GL-DEV
1 217
Note: CheckNewDylib 4.2 are active now , may cuz crash .

GL-DEV
1 217
Anogs GL 4.2 are same as 4.1 md5: 106ae65b75f9e5c32b0a0558765c5f22

GL-DEV
1 217
PB VNG 4.2
GNameFun 0x104b79bc4
GNameData 0x109f66330
GWorldFun 0x1029bd000
GWorldData 0x10a3b23e0
GUObject 0x10a199600
LineOfsignt 0x105dbfb74
ActorArray Decry fun 0x105f25014

By @saudgl , @pubg_dev

GL-DEV
1 217
PB GL 4.2
GNameFun 0x104c0f1e8
GNameData 0x10a0557e0
GWorldFun 0x102a5125c
GWorldData 0x10a4a1960
GUObject 0x10a288b80
LineOfsignt 0x105e55198
ActorArray Decry fun 0x105fba638
Process event fun 0x104db1904
HUD fun 1034aaf1c
Engine Data 0x10a4a0768
CanvasMap Data 0x10a0d7d38

By @saudgl , @pubg_dev

GL-DEV
1 217
to avoid re-sign app detection you must hook : 1- __LINKEDIT , return real orignal size 2- team ID , return real iteam is which is for now 4.1 =5A4RE8SF68 3- Bundle ID , com.ten... 4- Entitlements , This gives a dictionary containing things like: aps-environment, keychain-access-groups .. etc 5- Certificate Common Name , shows all Certificate Chain Information note they may use App’s Code Signature Validity . like

SecStaticCodeRef staticCode = NULL;
SecCodeCopySelf(kSecCSDefaultFlags, (SecCodeRef*)&staticCode);
OSStatus status = SecStaticCodeCheckValidity(staticCode, kSecCSCheckAllArchitectures, NULL);

GL-DEV
1 217
Repost from GL-DEV2
for who needs to solve the resign app detected , look at __text , __TEXT and who look to edit data section look at __DATA .

GL-DEV
1 217
Repost from GL-DEV2
here the hook Logs of all calls in Anogs 4.1 GL .

GL-DEV
1 217
Repost from GL-DEV2
//GL
  if([bundleIdentifier isEqualToString:@"com.tencent.ig"]){
       kUWorld = "0x10689C790";
     kGNames = "0x104B4449C";
     hookHUD = "0x1088C0248";
     kGetHUD ="0x103455D98";
     kDrawText ="0x106528A50";
     kDrawLine ="0x1061449C8";
     kDrawRectFilled ="0x106144938";
     kDrawCircleFilled ="0x106528EBC";
     kEngine = "0x10A7F5340";
     kBonePos = "0x10319C128";
kProjectWorldLocationToScreen = "0x1060EE128";
}
// Korean
if([bundleIdentifier isEqualToString:@"com.pubg.krmobile"]){
        kDrawText = "0x1066C1820";
        kDrawLine = "";0x106083A30
        kDrawCircleFilled = "0x1066C1C8C";
        kUWorld = "0x106A35560";
        kBonePos = "0x1033362C0";
        kProjectWorldLocationToScreen = "0x01062DD708";
}
// VNG
if([bundleIdentifier isEqualToString:@"vn.vng.pubgmobile"]){
        kDrawText = "0x106468D94";
        kDrawLine = "0x106083A30";
        kDrawCircleFilled = "0x106469200";
        kUWorld = "0x1067DCAD4";
        kBonePos = "0x1030DD60C";
        kProjectWorldLocationToScreen = "0x106084C7C";
}     

by胡图图 @ioshututunb

GL-DEV
1 217
Repost from GL-DEV2
GL 4.1
kUWorld = "0x102a28b7c";
kGNames = "0x104b4449c";
hookHUD = "0x1088c0248";
kGetHUD = "103455d98";
kDrawText = "0x106528a50";
kDrawLine = "0x1061449c8";
kDrawRectFilled = "0x106144938";
kDrawCircleFilled = "0x106528ebc";
kEngine = "0x10a7f5340";
kBonePos = "0x10319c128";
kProjectWorldLocationToScreen = "0x1060ee128";
by @saudgl GL-DEV

GL-DEV
1 217
Repost from GL-DEV2
BG!MI 4.1
GNmae Fun: 0x1044bd208
GNmae Data: 0x1099016e0

GWorld Fun: 0x1023a9ff8
GWorld Data:  0x109d42940

GUObject: 0x109b2b4f0
LineOfsignt : 0x1059C1124
ActorArray Decry:  0x105B25158
By @saudgl , @pubg_dev

GL-DEV
1 217
Repost from GL-DEV2
PB4.1 file name name (anogs) : here i decrypt string from game to read , and shows who call for it and the second caller for it .

GL-DEV
1 217
Repost from GL-DEV2
PB 4.1 , Objective-c Dump of ShadowTrackerExtra

GL-DEV
1 217
Repost from GL-DEV2
PB 4.1
GL
gobject 0x10A5DF0F0
gname_func 0x104B4449C
gname_data 0x10A3ADF90
gworld_func 0x102A28B7C
gworld_data 0x10A7F6540


VNG
gobject 0x10A4A4A70
gname_func 0x104A847E0
gname_data 0x10A273940
gworld_func 0x10296A060
gworld_data 0x10A6BBEC0

TW
gobject 0x10A7863F0
gname_func 0x104CB6438
gname_data 0x10A554FD0
gworld_func 0x102B9BEE0
gworld_data 0x10A99D840


KR
gobject 0x10A7A7370
gname_func 0x104CDD26C
gname_data 0x10A575F30
gworld_func 0x102BC2D14
gworld_data 0x10A9BE7C0
@pubg_dev

by @Dlbren92

GL-DEV
1 217
Repost from GL-DEV2
PB 4.1
 
Yaw: 0x888
Roll: 0x890
Pitch: 0x880
by @saudgl GL-Dev

GL-DEV
1 217
Repost from GL-DEV2
PB 4.1
HUD Fun   0x103455d98
Engine Data  0x10a7f5340
CanvasMap Data 0x10a42f218
by @saudgl GL-Dev

GL-DEV
1 217
Repost from GL-DEV2
PB 4.1 GL
GName Fun   0x104b4449c
GName Data   0x10a3adf90
GWorld Fun   0x102a28b7c
GWorld data   0x10a7f6540
GUObject   0x10a5df0f0
LineOfsignt   0x1060481cc
ActorArray Decry 0x1061ac278
Proces event 0x104ce6c38
GL-DEV
by @saudgl

GL-DEV
1 217
Repost from GL-DEV2
Note: for PB 4 , if you direct hook process event for rendering Will crash caz they detected hook. For pass temporary for test , run it on lobby . But will get ban later and same if you hook memcpy . even hook it now useless . Caz they use their own memcpy fun

GL-DEV
1 217
Repost from GL-DEV2
PB 4.1.0
// GL
GWorld Fun:  0x102A4A8F8
GWorld Data: 0x10AA91690

// KR
GWorld Fun:  0x102BE48DC
GWorld Data: 0x10AC75D90

// TW:
GWorld Fun:  0x1029878D8
GWorld Data: 0x10A947410

// VN
GWorld Fun:  0x102BBB8D7
GWorld Data: 0x10AC4CC90

// KR:
GName Fun:  0x104C630A0
GName Data: 0x10A5CE5E8

// TW:
GName Fun:  0x104C3A12C
GName Data: 0x10A5A84E8

// VN:
GName Fun:  0x104A0682C
GName Data: 0x10A7C2F58

@Pubg_dev

By @englishdick